CVE-2008-1149
phpmyadmin phpmyadmin: no CVSS score yet. EPSS 0.9% chance of exploitation in the next 30 days.
phpMyAdmin before 2.11.5 accesses $_REQUEST to obtain some parameters instead of $_GET and $_POST, which allows attackers in the same domain to override certain variables and conduct SQL injection and Cross-Site Request Forgery (CSRF) attacks by using crafted cookies.
- EPSS
- 0.9% chance of exploitation in the next 30 days; higher than 60% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-89, CWE-352
- Published
- Modified
- Record from
- the NVD, synced
Affected
- phpmyadmin:phpmyadmin